Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3438203d3e20323731343130.roa
File:                     323830343a376231383a3a2f33322d3438203d3e20323731343130.roa (raw, json)
Hash identifier:          jpuzGUzIBMDeqBM7E4EyVrYi5Ofatwg+xWIPl1csnqc=
Subject key identifier:   06:B5:76:54:81:35:26:68:C2:CC:2C:C5:A8:78:61:41:2D:CF:E7:B9
Certificate issuer:       /CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B
Certificate serial:       7E815100042550DF384CBB32872A217469025088
Authority key identifier: DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3438203d3e20323731343130.roa
Signing time:             Mon 02 Sep 2024 16:23:29 +0000
ROA not before:           Mon 02 Sep 2024 16:18:29 +0000
ROA not after:            Mon 01 Sep 2025 16:23:29 +0000
asID:                     271410
IP address blocks:        2804:7b18::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl
                          rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:81:51:00:04:25:50:df:38:4c:bb:32:87:2a:21:74:69:02:50:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B
        Validity
            Not Before: Sep  2 16:18:29 2024 GMT
            Not After : Sep  1 16:23:29 2025 GMT
        Subject: CN=06B5765481352668C2CC2CC5A87861412DCFE7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5b:b4:4b:2c:21:7d:7e:f4:0d:ac:e7:77:40:
                    c5:f0:ea:b8:cf:03:67:ed:8e:a2:d9:1a:47:68:11:
                    88:16:ad:26:8c:f1:fb:98:7d:9b:8b:87:78:83:54:
                    1c:66:ff:48:70:07:6e:b0:af:15:39:ad:1f:9c:ac:
                    fb:6a:bb:d5:d0:f6:9a:9a:98:e8:27:6f:de:0a:57:
                    75:9c:1d:2c:9d:01:8d:7a:7d:75:65:8f:b9:a0:79:
                    84:1d:40:5f:18:8a:87:7f:5e:90:2d:43:19:66:bc:
                    36:a2:6a:25:39:e2:7b:6f:32:f9:fd:45:dd:57:ac:
                    87:2f:e7:87:6e:33:05:ce:4b:e1:61:2d:1f:98:16:
                    c3:51:be:32:6d:0c:e2:e6:94:a8:23:1b:63:95:02:
                    b6:a1:c8:4a:e4:98:ba:f4:11:ca:b0:c1:df:ed:b4:
                    f6:dd:21:e1:9e:c5:93:b6:1f:e2:fd:b1:6a:42:1a:
                    d3:36:09:de:93:b5:db:84:5d:90:65:77:28:42:08:
                    2e:3f:57:b9:b9:ce:66:e0:32:5c:5b:aa:75:56:0f:
                    16:2c:8c:b8:cb:07:db:91:bb:c1:b8:3a:1f:d9:7f:
                    78:3e:9e:42:09:05:1f:ee:bc:99:d1:51:17:56:d6:
                    c5:4a:8f:b0:d0:6e:a8:da:76:be:f2:b9:9f:90:af:
                    c5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B5:76:54:81:35:26:68:C2:CC:2C:C5:A8:78:61:41:2D:CF:E7:B9
            X509v3 Authority Key Identifier:
                keyid:DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3438203d3e20323731343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b18::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:6b:42:2e:a7:c5:91:1e:15:2f:6a:9f:44:9e:20:78:a4:f4:
         23:ba:6d:74:71:22:f0:47:81:2a:ef:32:1d:3c:5b:93:05:f1:
         e5:49:69:66:c5:23:d5:5e:f0:8b:9d:8d:70:d2:01:08:17:73:
         e9:12:2a:43:83:fa:0d:cc:47:21:f6:d8:20:79:ef:3b:f5:56:
         81:31:de:f4:db:89:f9:fd:b3:e5:11:19:ee:73:5e:7b:65:a1:
         76:2f:60:a0:c8:27:0f:6e:1b:76:59:f4:d5:69:33:86:0d:4a:
         27:b7:72:47:3a:96:29:a9:0a:ce:cb:4c:c6:6b:53:2f:f7:d9:
         25:1f:99:fb:6a:58:b5:31:b6:7b:1c:fa:45:16:7d:63:e5:2b:
         24:90:94:27:1a:5b:64:a7:cf:95:d9:9a:76:f9:ac:54:39:44:
         ae:fe:75:94:22:68:5a:b4:ee:46:42:4b:33:9e:5d:91:cb:55:
         64:ed:a1:9a:65:72:10:07:12:7d:d6:8c:60:b7:80:e7:4e:93:
         9a:93:d4:ff:3c:56:b0:73:1f:8b:97:0a:62:48:f2:d5:b3:8e:
         3e:2f:aa:90:7e:46:08:11:4a:1c:f6:a8:9f:35:2c:83:d1:de:
         3c:7f:7a:03:f6:98:0d:47:81:10:a0:fe:a1:57:7a:cb:b3:7d:
         4c:89:66:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:28 2024 by rpki-client on console-ams.rpki-client.org